IBM Security QRadar SIEM V7.2.8 Fundamental Administration Set 2

Question - 15 Maximum mark : - 29

Home
All Exams
IBM Security QRadar SIEM V7.2.8 Fundamental Administration Online Mock Tests
IBM Security QRadar SIEM V7.2.8 Fundamental Administration Set 2

What must be done when creating a user with a non-admin role on an IBM Security QRadar SIEM V7.2.8 system that is utilizing Active Directory authentication?

Ensure the password has a minimum of 8 characters. ✘ Create the user's initial password and have them change it immediately. ✘ Ensure the user's QRadar password matches their Active Directory password. ✘ A password does not need to be set on QRadar when using Active Directory authentication. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An Administrator working with IBM Security QRadar SIEM V7.2.8 has to add a new host name to a reference set with the name "Allowed Hosts" from the command line interface.
Which command would accomplish this task?

./ReferenceSetUtil.sh add Allowed\ Hosts computer.domain.com ✘ ./UtilReferenceSet.sh add "Allowed Hosts" "computer.domain.com" ✘ ./UtilReferenceSet.sh update Allowed\ Hosts "computer.domain.com" ✘ ./ReferenceSetUtil.sh update "Allowed Hosts" "computer.domain.com" ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

When upgrading IBM Security QRadar SIEM V7.2.8 in High Availability (HA) deployments, how can the upgrade be automatically applied to the associated
secondary system(s)?

Issue the command on the primary system /media/updates/installer–HA ✘ Confirm the system setting on both the primary and secondary systems are set to "Upgrade YES" ✘ Make sure the primary system is the active system and the secondary system is in standby mode ✘ Make sure the primary system is the active system and the secondary system is in failover mode ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An IBM Security QRadar SIEM V7.2.8 Administrator is implementing a retention policy of flows and events. The retention buckets are sequenced in priority order from the top row to the bottom row.
What happens if a record does not match any of the configured retention buckets?

The record is dropped and is not stored ✘ The record is stored in the default retention bucket ✘ The record is stored in a raw format inside /default partition ✘ The record is stored in any of the available retention buckets ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

A backup failure occurs on an IBM Security QRadar SIEM V7.2.8 Console or on an Event Processor.
Which system notification message can an Administrator configure for an email notification?

Backup: requires more disk space ✘ Backup: unable to process backup request ✘ Backup: last Backup exceeded space threshold ✘ Backup: last Backup reached execution threshold ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An IBM Security QRadar SIEM V7.2.8 deployment configured with High-Availability (HA) has both a primary and secondary host. The administrator needs to test the operation of the primary high-availability (HA) host automatic failover to the secondary HA host.
What must be configured to accomplish this test?

Configure the time interval of heartbeat timeout tests so the secondary HA host receives a response from the primary HA host within 2 minutes. ✘ Configure the time interval of heartbeat timeout tests so the secondary HA host does not receive a response from the primary HA host within 2 minutes. ✘ Configure the time interval of heartbeat ping tests so the secondary HA host receives a response from the primary HA host within a preconfigured time period. ✘ Configure the time interval of the heartbeat ping tests so the secondary HA host does not receive a response from the primary HA host within a preconfiguredtime period. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

An Administrator of an IBM Security QRadar SIEM V7.2.8 deployment has configured an asset data source with domain information. This has created several new asset profiles.
What would explain these new asset profiles?

The asset data source parameter "Collateral Damage Potential" was left at the default "Not Defined" ✘ The data in the asset model is domain-aware, this information is applied to all QRadar components, including server discovery. ✘ The data in the asset model is used to compare flow data and identify other assets. These assets are added to a "Whitelist" database for asset reconciliation. ✘ The asset data source is attempting to process an asset merge. The information from one asset is combined with the information for another asset under thepremise that they are actually the same physical asset. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

When migrating the Console after restoring from an IBM Security QRadar SIEM V7.2.8 backup, what must be manually copied?

The Connection data and Topology data ✘ The Policy Monitor questions and event or flow data ✘ The QRadar Risk Manager device configurations and Topology data ✘ The certificates, any custom generated private keys and event or flow data ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

How would an Administrator working with IBM Security QRadar SIEM V7.2.8 review all logs?

Admin Tab -> System Configuration -> Actions -> Collect Log Files ✘ Admin Tab -> System Configuration -> Actions -> Collect All Log Files ✘ Admin Tab -> System & License Management -> Actions -> Collect Log Files ✘ Admin Tab -> System & License Management -> Actions -> Collect All Log Files ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

10.

What is important to understand when adding Offense Items to a Dashboard tab in IBM Security QRadar SIEM V7.2.8?

Minor or Hidden Offenses are not included in the values that are displayed. ✘ Minor or Closed Offenses are not included in the values that are displayed. ✘ Closed or Hidden Offenses are not included in the values that are displayed. ✘ Closed or Assigned Offenses are not included in the values that are displayed. ✔

Answer & Solution Discuss in Board Save for Later

Answer & Solution

Answer: Option B

Solution:

It provides fallback for IE8.

Prev Next

Congratulations

you have successfully completed the test

Back to Question View Result

Detail Form

We will send your result on your email id and phone no. please fill detail

Name

Email ID Note: Report will be send to the above Email ID

Phone No

IBM Security QRadar SIEM V7.2.8 Fundamental Administration Set 2

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Answer & Solution

Answer: Option B

Solution:

Congratulations

COMPANY

Products

OTHERS

Partner